Privacy Statement for Customers/Family Members at Salubi AS
The privacy statement applies to the processing of personal data in connection with your customer relationship with or being a family member of a customer at Salubi AS. Below, you will find information about the personal data collected, the reasons for doing so, and your rights related to the processing of personal data.
Salubi AS is the data controller for your information.
WHY WE COLLECT PERSONAL DATA AND WHAT TYPE OF INFORMATION WE COLLECT
We process personal data about you to fulfill service agreements for the delivery of private health and care services, as well as in accordance with healthcare personnel laws and the requirements of associated regulations. We collect only the personal data necessary to provide our services to you. The primary purpose of processing your personal data is to provide proper healthcare and offer our medical services.
The information we collect about you includes details that we consider relevant for providing proper healthcare. We obtain this information from you, other healthcare institutions where you have received treatment, and samples we take, among other sources.
When you receive services from us, we are obliged to record all necessary information in our patient record systems to provide such assistance. Legal requirements govern the maintenance of patient records and the information to be documented. The record may include contact information, next of kin, medical history, previous treatments, medications, diagnoses, X-ray images, etc.
All our employees and subcontractors processing health information about you are bound by confidentiality. The same applies to others processing personal data on our behalf.
WE COLLECT THE FOLLOWING INFORMATION:
Customer Information
Basis for Processing: Necessary to fulfill the agreement, cf. Article 6(b) of the General Data Protection Regulation, and service agreements for the delivery of private health and care services.
Contact Information (address, phone, email)
Information about visits
Basis for Processing: Necessary to fulfill the agreement, cf. Article 6(b) of the General Data Protection Regulation, and service agreements for the delivery of private health and care services.
Information about possible care needs and journal entries (applies to cases where you, as a customer, have ordered nursing services or similar health services)
Basis for Processing: Necessary for the performance of health services, cf. Article 9(2)(h) of the General Data Protection Regulation. The following regulations apply here:
Healthcare Personnel Act
Patient Record Act
Signed service agreement for the delivery of private health and care services
Information about relatives/payment responsible party
Basis for Processing: Necessary to fulfill the agreement, cf. Article 6(b) of the General Data Protection Regulation, and service agreements for the delivery of private health and care services.
Additionally, we may process personal data if necessary to safeguard a legitimate interest outweighing the individual's privacy interests. The legitimate interest must be legal, defined in advance, real, and based on business rationale.
Personal data is primarily obtained from the customer themselves or, if applicable, from the customer's family. We also collect information through interactions during the execution of the assignment, where we believe the information is essential for documentation purposes, including cases where journaling is required under healthcare personnel laws and patient record laws.
DISCLOSURE OF PERSONAL DATA TO OTHERS
We do not disclose your personal information to others unless there is a legal basis for such disclosure. Examples of such bases include your consent, disclosure due to contractual obligations, or a legal basis requiring us to provide the information.
Salubi may be obligated to disclose your personal information to:
Healthcare institutions or other healthcare professionals
Public authorities
Data processors
All processing of personal data takes place within the EU/EEA area.
STORAGE PERIOD
We store your personal information with us for as long as necessary for the purpose for which the personal information was collected and delete the information in accordance with regulatory requirements. This means, for example, that personal information processed based on your consent will be deleted if you withdraw your consent.
We note that certain information is not deleted when the customer relationship ceases. This includes information that, based on other legislation, must be retained for several years after the contract ends. This may include accounting-related matters requiring such retention. Regarding personal information stored in patient records, different rules apply. The general rule is that the records should be preserved as long as it is appropriate for the nature of the healthcare. Salubi is also obligated under healthcare archive regulations to submit journal material to the Norwegian Health Archive when it is no longer considered necessary.
If you are unsure whether your information is stored by us, please feel free to contact us.
YOUR RIGHTS WHEN WE PROCESS PERSONAL INFORMATION ABOUT YOU
You have the following rights:
Right to information about and access to personal information we process about you.
Right to have incorrect personal information about you corrected or incomplete personal information completed.
Right to have personal information about you deleted under certain conditions.
Right to request that the processing be restricted under certain conditions.
Right to object to the processing.
If we process personal information on your behalf based on your consent or under an agreement with you, you have the right to have such information transferred to another data controller.
You can read more about the content of these rights on the Data Inspectorate's website: www.datatilsynet.no.
To exercise your rights, you must contact us in writing via email: post@salubi.no.
We will respond to your inquiry as soon as possible, and no later than within 30 days. We will ask you to confirm your identity or provide additional information before allowing you to exercise your rights with us. This is done to ensure that we only provide access to your personal information to you – and not to someone pretending to be you.
In some cases, we may process personal information about you based on your consent. You can withdraw your consent to the processing of personal information with us at any time. The easiest way to do this is to contact the managing director.
When paying through our partner Periode, you can pay with a card or Vipps. If you do not pay within 48 hours, you will receive an invoice, and an invoice fee will be charged.
PAYMENT VIA MOBILE
To offer mobile payment, information about you and the amount you are to pay for the appointment is transferred to Vipps/Periode. The information is temporarily stored on European servers and deleted when the purpose is fulfilled and in accordance with relevant legislation.
The first time you log into the app, we ask you to authenticate yourself with BankID to ensure that we do not show your health information to anyone other than you. The next time you log in, you can do it either by using a 6-digit PIN that you choose yourself or by using fingerprint or facial recognition on your phone. This way, we ensure that your information is secure. If you delete the app from your phone, the encrypted information about your appointments with us will also be deleted.
COOKIES
Salubi uses cookies to analyze visitor behavior for use in the development and improvement of websites and our products, technical purposes to ensure that websites function and optimize pages, and for marketing purposes, such as measuring the effectiveness of our online marketing or targeting advertising.
COMPLAINTS
If you believe that our processing of personal information does not align with what we have described here or that we otherwise violate privacy legislation, you can complain to the Data Inspectorate. You can also contact us. You can find information on how to contact the Data Inspectorate on the Data Inspectorate's website: www.datatilsynet.no.
CHANGES
If there are changes to our services or changes in the regulations on the processing of personal data, this may result in changes to the information provided here. If we have your contact information, we will inform you of these changes.
CONTACT INFORMATION
Inquiries about registered information, correction, and deletion can be sent in writing to:
Salubi AS
Email: post@salubi.no
Phone: +47 93 07 40 00
Karl Johans gate 37, 0162 Oslo